Last Updated: April 24, 2026
1. Introduction
Hands2Hands ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our marketplace connecting homeowners with licensed service professionals ("Service").
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Name, email address, and phone number
- Billing information (processed securely by Stripe — we never store full card numbers)
- Account credentials (passwords are hashed and never stored in plain text)
- Service addresses you add to your profile
2.2 Service Data
We automatically collect certain information when you use the Service:
- Login activity and timestamps
- Service requests, bids, and messages you send or receive
- Support request history
- IP addresses and device info for security purposes
2.3 First-party analytics cookie
We set a first-party cookie named h2h_vid containing a random identifier so we can count unique visitors and understand how people move through the site. The cookie is set under our own domain, is not readable from JavaScript (HttpOnly), and is never shared with third parties. We do not use it for advertising, profiling, or cross-site tracking. You can clear it any time from your browser’s cookie settings.
2.4 Contractor Verification Data
For professionals who list on Hands2Hands, we collect and verify business details such as license numbers, insurance information, and business addresses. Verification documents are stored securely and only used to confirm eligibility to operate on the platform.
3. How We Use Your Information
- To provide, maintain, and improve the Service
- To process transactions and send related receipts and confirmations
- To match homeowners with relevant contractors
- To send technical notices, updates, and support messages
- To respond to your comments, questions, and requests
- To monitor and analyze usage trends to improve user experience
- To detect, investigate, and prevent fraudulent activity and abuse
- To comply with legal obligations
4. What We Do Not Do
- We do not sell your personal information to any third parties
- We do not share your data with third parties for their marketing purposes
- We do not use your data to train third-party AI or machine learning systems
- We do not share your contact information with contractors until you initiate a conversation
- We do not engage in profiling for advertising
5. Data Retention
5.1 Active Accounts
We retain your account information for as long as your account is active or as needed to provide you services.
5.2 Account Deletion
To request account deletion, send a note via our support page (logged in) or our public contact form with the subject “Account deletion”. We process deletion requests manually within 30 days.
What is deleted: account credentials, profile information, contact details, uploaded photos, and personal communications.
What may be retained (and why): payment records and invoices for tax/accounting purposes, completed-job history shared with the matched contractor or homeowner, fraud-prevention signals, and anything we are required to keep by applicable law or by Stripe’s record-keeping obligations. Public reviews and ratings you posted may remain visible in anonymized form.
5.3 Backup Retention
System backups containing your data may persist for up to 30 days after deletion before being permanently removed.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- TLS 1.2+ encryption for all data in transit
- Encryption of sensitive data at rest
- Role-based access controls and row-level security on our database
- Secure password hashing using industry-standard algorithms
- Regular security updates and patch management
7. Third-Party Services
We rely on the following third-party services to operate our marketplace:
- Stripe — payment processing. See stripe.com/privacy.
- Supabase — authentication and database hosting.
- Mapbox — address autofill and geocoding.
- Email service provider — transactional emails (verification, password resets, notifications).
These services have their own privacy policies governing their use of your information.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate or incomplete data
- Deletion — request deletion of your personal data
- Objection — object to processing of your data in certain circumstances
- Portability — request transfer of your data to another service
- Withdrawal — withdraw consent where processing is based on consent
To exercise these rights, please contact us through our support page.
9. California Privacy Rights (CCPA)
If you are a California resident, you have specific rights under the California Consumer Privacy Act, including:
- The right to know what personal information we collect and how it is used
- The right to request deletion of your personal information
- The right to opt out of the sale of personal information (note: we do not sell personal information)
- The right to non-discrimination for exercising your privacy rights
10. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately so we can remove it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the modified Privacy Policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please reach out through our contact page.